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Abstract — We propose the theory of Cayley graphs as a 
framework to analyse gate counts and quantum costs resulting 
from reversible circuit synthesis. Several methods have been 
proposed in the reversible logic synthesis literature by considering 
different libraries whose gates are associated to the generating 
sets of certain Cayley graphs. In a Cayley graph, the distance 
between two vertices corresponds to the optimal circuit size. 
The lower bound for the diameter of Cayley graphs is also a 
lower bound for the worst case for any algorithm that uses the 
corresponding gate library. In this paper, we study two Cayley 
graphs on the Symmetric Group &*> : the first, denoted by /„, is 
defined by a generating set associated to generalized Toffoli gates; 
and the second, the hypercube Cayley graph H n , is defined by a 
generating set associated to multiple-control Toffoli gates. Those 
two Cayley graphs have degree n2™ 1 and order 2 n !. Maslov, 
Dueck and Miller proposed a reversible circuit synthesis that we 
model by the Cayley graph I n . We propose a synthesis algorithm 
based on the Cayley graph H n with upper bound of (n — l)2 n + 1 
multiple-control Toffoli gates. In addition, the diameter of the 
Cayley graph H n gives a lower bound of n2 n ~ 1 . 

Index Terms — circuit synthesis, quantum complexity, Cayley 
graphs. 

I. Introduction 

An important feature of the circuit model of quantum 
computation is reversibility. This isa consequence of the 
evolution postulate of quantum mechanics, which states that 
the time-evolution of the state of a closed quantum system is 
described by a unitary operator [1]. Therefore, the theory of 
reversible computation is one of the foundations of quantum 
computation. In any reversible circuit — classical or quantum — 
the output contains sufficient information to reconstruct the 
input, i.e., no input information is erased [2]. This aspect of 
reversible computation has important physical consequences. 
For instance, it is well established that conventional logic gates 
lead to at least kT In 2 energy dissipation per irreversible bit 
operation, where k is Boltzmann's constant and T is the abso- 
lute temperature of the circuit [3]. Therefore, logical circuits 
with almost zero power dissipation will only be possible if 
they are built from reversible gates [4]. Thus, reversible com- 
puters can be economically more interesting for low-power 
design than a computer with conventional circuits. The field 
of reversible computing also draws motivation from several 
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sources, such as signal processing, cryptography, computer 
graphics, nano and photonic circuits, just to mention a few [5]. 

A set of reversible gates is needed to design reversible 
circuits. Group Theory has recently been employed as a tool 
to analyse reversible logic gates and investigate generators for 
the group of reversible gates [6], [7]. In this work, we study 
Cayley graphs associated to the Symmetric Group in order 
to analyse reversible circuit synthesis methods. Each method 
has been proposed by considering different libraries whose 
gates are associated to the generating sets of certain Cayley 
graphs. 

Several properties of these Cayley graphs — such as degree, 
distance and diameter — are considered. The degree of the 
Cayley graph is exactly the size of the generating set, which 
in turn corresponds to the size of the gate library. The distance 
between two vertices corresponds to the optimal circuit size — 
each gate produces an edge of the Cayley graph, so the circuit 
size corresponds to the distance. Finally, an important property 
of Cayley graphs is that the lower bound for their diameter is 
also a lower bound for the worst case of any algorithm that 
uses the corresponding gate library. 

Our goal is to analyse reversible circuit synthesis based 
on Cayley graphs. We present two Cayley graphs on the 
Symmetric Group S^"' the first, denoted by /„, is defined 
by a generating set associated to generalized Toffoli gates 
(G-Toffoli); the second, the hypercube Cayley graph H n , is 
defined by a generating set associated to multiple-control 
Toffoli gates (MC-Toffoli). Maslov, Dueck and Miller [8], [9] 
proposed a reversible circuit synthesis that we model by the 
Cayley graph I n . We propose a synthesis algorithm based on 
the Cayley graph H n with upper bound of (n — 1)2" + 1 
multiple-control Toffoli gates. In addition, the diameter of the 
Cayley graph H n gives a lower bound of n2 n_1 . 

This paper is organized as follows. In Section 2, we intro- 
duce notation and review some basic concepts on circuits and 
group theory that will be necessary throughout the paper. We 
also describe two algorithms for circuit synthesis: the first, 
based on G-Toffoli gates; and the second, based on MC- 
Toffoli gates. In Section 3, we present the analysis of the 
circuit synthesis based on G-Toffoli gates, which we model by 
Cayley graph I n . In Section 4, we present the analysis of the 
circuit synthesis based on MC-Toffoli gates, which we model 
by Cayley graph H n . In Section 5, we present our conclusions. 
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II. Preliminaries 

A. Graph Theory and Cayley graphs 

Let (G, ■) be a finite group with identity element denoted 
by 6. A subset G of this group is a generating set if every 
element of G can be expressed as a finite product of elements 
in G. We also say that G is generated by C. 

Definition 1. Let C be a generating set for a group G. We say 
that a directed graph T(V, E) is a Cayley graph associated to 
a group with generating set (G, G), ;/ there exists a bijection 
mapping every vertex v £ V to a group element g £ G, such 
that group elements (g,h) £ G are connected by a directed 
edge (g,h) £ E if and only if exists c £ G such that h = c- g. 

If l ^ G, then there are no loops (i.e., edge between a same 
element) in T, which we define as the identity free property. 
If c £ G implies cr 1 £ C, then for every edge from g to g ■ c, 
there is also an edge from g ■ c to [g ■ c) • c _1 = g, which 
we define as the symmetry condition. The Cayley graph with 
identity free property and symmetry condition is an undirected 
graph. In this paper, we only consider undirected graphs. 

Let A be a finite set and / : A —> A a bijective 
function, i.e., a permutation. For example, ir = [1 3 2 0] is 
a permutation over {0,1,2,3} where ir[0] = 1, ir[l] = 3, 
7r[2] = 2 and 7r[3] = 0. The set of all nl permutations on 
A = {0, 1, • • • , n — 1} with function composition operation 
forms the Symmetric Group S n on A. 

Definition 2. The distance d{u, v) between the vertices u 
and v in a graph is the number of edges in a shortest path 
connecting them. 

Definition 3. The diameter D is the largest distance among 
all pairs of vertices. 

In Cayley graphs, the problem of finding the distance among 
all pairs of vertices, is equivalent to finding the minimum 
length sequence that creates the element p from i, see [10]. 
So, in order to find the diameter, it is sufficient to calculate 
the greatest distance between the identity vertex and all other 
vertices. 

Definition 4. Let Ttb and o~b be the binary representations 
of permutations tt and a, respectively. Hamming distance 
dp (7r, a) is the number of positions in iTb and <7f, with different 
bits. 

For example, the elements (0, 1, 1) and (1,1,1) have Ham- 
ming distance 1. 

B. Reversible and quantum circuits 

A logic circuit consists of interconnected logic gates. A 
classical logic gate is a function / : {0,1}" — > {0, l} m 
with n input bits and m output bits. We define combinational 
circuit or irreversible circuit as an acyclic logic circuit, which 
means that each instance of the logic gate is used only once. 

When a function / is bijective, it has an inverse function. 
Therefore, there is a circuit where, for each output value y of 



/, it produces the value x such that f(x) = y. In this case we 
say that the circuit is reversible. A reversible n-gate realizes a 
bijective function over {0, 1, . . . , 2™ — 1}. For any reversible 
gate g, the gate g" 1 implements the inverse transformation. 

A generalized Toffoli gate or G-Toffoli gate C n NOT{x\, 
X2, • ■ • , x n ) keeps the first n — 1 lines, called control lines, 
unchanged. This gate flips the n-fh line, target line, if and 
only if each control line carries the 1 value. For example, 
Figure 1 shows a C 4 NOT(a,b,c,d) gate. For n = 0,1,2 
the gates are named NOT(N), CNOT(C), and Toffoli(T), 
respectively (see Figure 2). These three gates compose the 
CNT library [2], which is a universal set of gates for the 
classical reversible computing. 
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Fig. 1. G-Toffoli gate representing C 4 NOT (a, b, c, d). The top line denotes 
the less significative bit. 



-0- 



(a) NOT 



a — 
b — b' 
(b) CNOT 



a 

b 

c 

(c) Toffoli 



-e- 



Fig. 2. Circuit representation for the CNT gate library. The top line denotes 
the less significative bit. 



Observe that a reversible n-gate applied in a specific posi- 
tion realizes a permutation of 52" ■ For example, using decimal 
notation, the NOT gate over one line realizes the permutation 
[1 0]. If the NOT gate is applied over the most significative 
bit in a 2-line circuit, then the associated permutation is 
[2 3 1]. The CNOT gate over the 2-line circuit realizes the 
permutation [0 13 2] or the permutation [0 3 2 1], depending 
on the position of the control bit. 

The concatenation of gates in a circuit is equivalent to 
realizing the composition of permutations associated to each 
gate of the concatenation in the same order. 

Definition 5. Let L be a reversible gate library. An 
L-circuit is a circuit composed only of gates from L. A 
permutation tt £ S%n is L-constructible it can be realized 
by an L-circuit. 

Theorem 1 (Shende et al. [11]). Every permutation is CNT- 
constructible with at most one line of temporary store. 

Definition 6. Li is the reversible gate library formed only by 
generalized Toffoli gates. 
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A multiple-control Toffoli gate or MC-Toffoli gate 
C n NOT(xi, X2, ■ ■ ■ ,x n ) keeps the first n — 1 lines, called 
control lines, unchanged. This gate flips the n-th line, target 
line, if and only if each positive (or negative) control line 
carries the 1 (or 0) value. We indicate the line which is 
the negative control with ' after control. See Figure 3 for 
an example of a 4 x 4 multiple-control Toffoli gate with a 
negative-positive-negative pattern of control lines and target 
on the last line, which can be denoted by C 4 (a', b, c',d). 



Fig. 3. MC-Toffoli gate representing C 4 NOT(a' ,b, d ,d). The top line 
denotes the less significative bit. 



Theorem 2 (Toffoli [2]). Any invertible finite function of order 
n is obtained by the composition of multiple-control Toffoli 
gates. 

Definition 7. Lh is the reversible gate library formed only 
by multiple-control Toffoli gates. 

In the quantum circuit synthesis, a small set of primitive 
gates are used as elementary building blocks with an assumed 
unit cost [12]— [14]. A standard set of universal gates is 
composed by Hadamard, phase, CNOT and ir/8 gates [1]. In 
the context of our work, it is also reasonable to include in this 
set the NOT gate, the controlled-^ gate, and the controlled- 
V' gate, with V defined as the square root of NOT, i.e., a 
unitary operator such that V 2 is equal to the NOT operator. 
Each Toffoli gate, G-Toffoli gate, or MC-Toffoli gate can be 
decomposed into a sequence of quantum gates from the above 
mentioned set, following the pattern of Figures 4 and 5. 
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Fig. 4. Decomposition of two-control quantum gate into a sequence of 
single-control quantum gates. An analog decomposition pattern is possible 
for quantum gates with more than two controls [1]. 

The number of gates has been used to evaluate nearly all 
synthesis approaches in literature so far. For an arbitrary circuit 
C consisting of a sequence <?i, <?2) • • • , <7fc of k quantum gates, 
the gate count metric is defined as gc(C) = k. We also refer to 
the notion of quantum cost to measure the implementation cost 
of quantum circuits. More precisely, quantum cost is defined 
as the number of elementary quantum operations needed to 
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Fig. 5. Decomposition of two-control quantum gate with one negative control 
into a sequence of single-control quantum gates. An analog decomposition 
pattern is possible for quantum gates with more than two controls. 

TABLE I 

Quantum costs of various gates 
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realize a gate. For an arbitrary quantum gate g that can be 
decomposed into k elementary quantum gates, its quantum 
cost metric is defined as qc(g) = k. The quantum cost for a 
circuit C is defined as qc(C) = J2 g ec 9 c (-9«)- Table I shows 
the quantum cost for all the reversible gates used in this paper, 
with m denoting the amount of negative controls on the MC- 
Toffoli gate. 

In Figure 6, we have an example of how to decompose a 
MC-Toffoli gate of size n = 6 into Toffoli gates, with n — 
3 ancilla (garbage) bits, by using a synthesis method based 
on [15], [16]. Quantum cost, in this case, is the gate count 
multiplied by 5. 
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In Figure 7, we have an example of how to decompose a 
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MC-Toffoli gate of size n = 6 into Toffoli gates, with n — 3 
garbage bits, by using a synthesis method based on [12], [13]. 
Notice that in this case, we do not need to initialize the garbage 
bits with zeros. 
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Fig. 7. Implementation of MC-Toffoli for ra 
on [12], [13]. 



6 and 3 garbage based 



In Figures 8 and 9, we have an example of how to decom- 
pose a MC-Toffoli gate of size n — 8 into Toffoli gates, with 
one garbage bit, by using a synthesis method based on [12], 
[13]. 
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Fig. 9. Implementation of MC-Toffoli for n = 8 and 1 garbage based 
on [12], [13]. 

In Figure 10, we have an example of how to decompose 
a G- Toffoli gate of size n = 9 into Toffoli gates, without 
garbage bits, by using a synthesis method based on [12], [13]. 
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Fig. 10. G-Toffoli n=9 and garbage by [12], [13]. 

C. Circuit synthesis using generalized Toffoli gates 

We show below the reversible circuit synthesis using gener- 
alized Toffoli gate, which we call Basic Algorithm. The Basic 
Algorithm was proposed by Maslov, Dueck and Miller [8], 
[9], and is reproduced in Algorithm 1. It considers a reversible 
function specified as a mapping over {0, 1, . . . , 2" — 1}, i.e., a 
truth vector. It writes a function f(i), where i is an integer in 
the range < i < 2 n — 1, meaning that the function argument 
i is a vector giving the binary expansion of the integer i. The 
result of the function application to an integer argument i, 
f(i), is treated as an integer as well. The Basic Algorithm 
works by assigning Toffoli gates at the output end of the 
cascade. The Toffoli gates are chosen so that the output part 
of the specification is progressively transformed to match the 
input part. When a cascade of Toffoli gates transforming the 
total specification into the identity permutation is found, then 
reading this cascade in reverse order will transform the input 
to the required output, thus realizing the target function. 



Table II illustrates the application of the Basic Algorithm. 
Notice that the gates are identified in order from the output 
side to the input side. The corresponding network is showed 
in Figure 1 1 . 
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Fig. 11. Reversible circuit that transforms permutation t into 7T, according 
to example taken from Table II. 



Using the Basic Algorithm, it is possible to find a per- 
mutation for any n that requires at most (n — 1)2" + 1 
generalized Toffoli gates. The Basic Algorithm finds the 
permutation [7 1 4 3 2 6 5] for n = 3 and the permutation 
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Algorithm 1: Basic Algorithm [8], [9] 

1 begin 

2 Step 0: If /(0) (fi 0, invert the outputs corresponding 
to 1-bits in f(0). Each inversion requires a NOT 
gate. The transformed function, written as f + , has 
/+(0) = 0. 

3 Step i: Consider each i in turn for < i < 2" — 1 
letting f + denote the current reversible specification. 
If f + (i) = i, no transformation and, hence, no Toffoli 
gate is required for this i. Otherwise, gates are 
required to transform the specification to a new 
specification f ++ with f (i) = i. The required 
gates must map f + (i) — > i. 

4 Let p be the bit string with Is in all position where 
the binary expansion of i is 1, while the expansion of 
f + (i) is 0. These are the 1 bits that must be added in 
transforming f + (i) — > i. Conversely, let q be the bit 
string with Is in all positions where the expansion of 
i is 0, while the expansion of f + {i) is 1. q identifies 
the 1 bits to be removed in the transformation. 

5 For each pj — 1, apply the Toffoli gate with control 
lines corresponding to all outputs in positions where 
the expansion of i is 1 and whose target line is the 
output in position j. This will increase the 
lexicographical order of f + (i). Then, for each 

qk = 1, apply the Toffoli gate whose target line is the 
output in position k, and with control lines 
corresponding to all outputs in positions, except k, 
where the expansion of f + (i) is 1. This second 
operation decreases the lexicographical order, but not 
_ below i. 



TABLE II 

Example of applying the Basic Algorithm 
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[15 1 12 3 5 6 8 7 10 13 9 2 4 14 11] for n = 4. 

Table III shows the results of applying version of Algo- 
rithm 1 over all 8! = 40320 permutations when n = 3. We 
show the number of functions for each gate count and the 
average number of gates required. 

D. Circuit synthesis using multiple-control Toffoli gates 

We present below the reversible circuit synthesis using 
multiple-control Toffoli gates, denoted by hypercube method. 
Each permutation is a sequence of n2 n bits. The application 



TABLE III 

Number of reversible 3x3 functions for Algorithm 1 using 
g-toffoli gates and comparing with optimal results from [11]. 
For each scenario, we show the average number of G-Toffoli 
gates required. 
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1 
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5.63 



of a multiple-control Toffoli gate over one permutation n 
generates a permutation it', with change over two bits, i.e., 
dff(7r, 7r') = 2. Regarding the identity permutation t, we 
have three cases for the Hamming distance: i) dH^b^b) = 
(71^, Lf,) — 2, when the gate places two bits in their correct 
positions; ii) du^b,^) = dni^, t-b), when the gate places 
one bit in its correct position and misplaces one bit in a 
wrong position; iii) dH{^b,^b) = dni^'i,, L b) + 2, when the 
gate misplaces two bits in wrong positions. 

The hypercube method for reversible circuit synthesis uses 
the Lh gate library. This method, presented in the Algo- 
rithm 2, uses consecutive applications of multiple-control 
Toffoli gates in order to organize the bits. The proposed 
method takes the binary representation of the permutation 
elements — each one is composed of n bits — and carries out 
at most n changes. Those changes use the multiple-control 
Toffoli gate in order to put the permutation element in its 
correct position. See example in Table IV. The corresponding 
reversible circuit is given in Figure 12. 

For instance, Table IV shows the hypercube method that 
transform the permutation tt=[7 410326 5] into the 
identity permutation l = [0 123456 7]. 
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Fig. 12. Reversible circuit that transforms permutation t into n, according 
to example taken from Table IV. 
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TABLE IV 

The evolution of permutation it being transformed into l by 
hypercube method. the elements that need to be moved are 
presented in bold typeface. ordered elements are presented 
underlined. 
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Algorithm 2: Reversible circuit synthesis 
input : 7Tb vector 
output: circuit stack 

1 begin 

2 TV — lenght of Tr b vector; 

3 n = log 2 N; 

4 for i = N — 1 until 1 do 
s if 7Th [i] ^ Lb [i] then 

6 for j = n — 1 until do 

if TTfeHbl + L b[i][]\ then 

/* Adds to the circuit a 
MC-Toffoli with target 
in position j and 
controls in positions 

7Tfe - j * / 

push 

C n NOT(n b [0],...,n b [n- l],ir b \j}) 
to circuit; 
change 7T& [«][?]; 



10 



return circuit 



Algorithm 2 makes the reversible circuit synthesis using 
multiple-control Toffoli gates and reads the permutation from 
right to left order. We call it the right order. One can change 
the line 4 of Algorithm 2 to read the permutation from left 
to right order. In that case, we call it the left order. Denoted 
by unidirectional if Algorithm 2 runs right order or left order. 
Denoted by bidirectional if Algorithm 2 runs right order and 
left order. 



The hypercube method has the following property in the 
change of permutation and it is used to prove the correctness 
of Algorithm 2. 

Property 1. When i < k in the external for loop in Algo- 
rithm 2, let 7T be any permutation and let 77 [fc] be a component 
of permutation n, where i < k < 2™ — 1. Then we have that 
7r[fc] = k. 

Theorem 3. Algorithm 2 returns a reversible circuit using 
multiple-control Toffoli gates. 

Proof: We will prove by induction the correctness of 
the Algorithm 2 by showing that in the application of each 
multiple-control Toffoli gate, at least one bit changes or stays 
in its correct place. The induction hypothesis: In the step i = k 
and j = I, we have n[k'] = k' and 77b[fc][Z'] = if,[fc][/'] for 
k' > k and I' > I, or in other words, the elements greater 
than k and all less significative bits than 7Tf,[fc][Z] of 77 [fc] stay 
in their correct positions. 

When i = N — 1, it is only possible to change with 



7r[fc'], where k' < N — 1, warranting the satisfiability of the 
basis of induction. 

The induction is guaranteed if we show that the gate 
application, in the step i = k, does not affect any element 
n[k'], with k' > k. 

In the step i = k and j = I, if 7Tf,[fc][Z] = then no 

change is needed. Otherwise, ir[k] must change the Z-th bit 
with 7r[m] such that 



7T b [m][jj] 



n b [k]\p] ifp^l 
\ir b [k]\p] ifp = l, 



where Ix is 1 if x = or in otherwise. 

If 7T(,[fc][Z] = 1 then the change (1 to 0) is made to a value 
7r[m] less than 7r[fc], consequently, by induction hypothesis, to 
a value less than k. If 7Tf,[fc][Z] = then the change is made to 
a value greater than 7r[fc]. We must show that the 7r[m] < k. 

Take the most significative bit I' of 7r[fc] such that 7rj, [fe] [Z'] ^ 
i& [&][?']. We can separate in two cases: (i) I' = I (ii) I' > I. In 
the case (i), the bits more significative than I of 7r[fc] are correct 
and by induction hypothesis, the bits less significative than I of 
7r [k] are correct and 7r[fc'] = k' for k' > k, hence if m > k then 
77 [m] = k and 77 [m] = k', that is not possible. In the case (ii), 
if m > k then 7r(,[m][Z'] = 1, but 77f,[ro] [7'] = 7r&[fe][Z'] when 
/' 7^ I, thus 77[fc] > k that is contrary to induction hypothesis. 

■ 

Theorem 4. The reversible circuit returned by Algorithm 2 
has size less than or equal to (n — 1)2" + 1 multiple-control 
Toffoli gates. 

Proof: Notice that each gate application changes at least 
one bit to its correct place. Therefore, Algorithm 2 terminates 
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TABLE V 

Number of reversible 3x3 functions for Algorithm 2 using 

m c-toffoli gates and comparing with optimal results 
FROM [11]. For each scenario, we show the average number of 

MC-TOFFOLI GATES REQUIRED. 



Size 


Number of permutations 


Algorithm 2 


Algorithm 2 


optimal results 




unidirectional 


bidirectional 


by NT library 


17 


1 






16 


14 






15 


92 






14 


380 


9 




13 


1113 


111 




12 


2468 


581 


47 


1 1 
1 1 


4311 


1946 


1690 


10 


6083 


4349 


8363 


9 


7044 


6917 


12237 


8 


6754 


8255 


9339 


7 


5379 


7662 


5097 


6 


3549 


5546 


2262 


5 


1922 


3088 


870 


4 


839 


1329 


296 


3 


286 


424 


88 


2 


72 


90 


24 


1 


12 


12 


6 





1 


1 


1 


avg. gates 


8.67 


7.71 


8.50 



after applying a maximum of re2" multiple-control Toffoli 
gates. In order to prove an upper bound, we construct a worst- 
case function for this algorithm. 

The first 2" _1 input patterns match the input, so the most 
significant bit of the output patterns has been completely dealt, 
2" _1 zeros are in the upper part of the truth table, the lower 
2"" 1 must then by definition be 1. Therefore, starting from 
this step, the most significant bit is fixed. Starting from step 
2 n— 1 , flip only the remaining n — 1 unspecified bits of the 
output. 

Similarly, at step 2" _1 + 2" -2 of the algorithm, the second 
most significant bit will be completely specified. In general, at 
step 2" -1 + 2"~ 2 + . . . + 2™~\ the i most significant bits are 
completely specified. Thus, the maximum number of multiple- 
control Toffoli gates produced by the Algorithm 2 becomes: 

n2 n - 1 + {n-l)2 n - 2 + ... + n-{n-l)2 n - n = (n-l)2 n + l. 

Therefore, (re — 1)2" + 1 is an upper bound for the circuit size 
obtained by Algorithm 2. ■ 

Using Algorithm 2, it is possible to find a permutation for 
any n that requires at most (re — 1)2" + 1 multiple-control 
Toffoli gates. If Algorithm 2 runs on right order, then we 
find the permutation [5 2 7 4 1 6 3 0] for re = 3 and the 
permutation [5 10 7 4 9 14 11 8 13 2 15 12 1 6 3 0] for 
re = 4. If Algorithm 2 runs on left order, then we find the 
permutation [7 4 1 6 3 5 2] for re = 3 and the permutation 
[15 12 9 14 3 13 2 7 4 1 6 11 8 5 10] for re = 4. 

Table V shows the results of applying version of Algo- 
rithm 2 over all 8! = 40320 permutations when n = 3. We 
show the number of functions for each gate count and the 
average number of gates required. 



III. Analysis of a circuit synthesis based on 

Cayley graph I n 

In this section, we present the Cayley graph I n associated to 
G-Toffoli gates. These gates are used in the method for circuit 
synthesis proposed by Maslov, Dueck and Miller [8], [9], as 
we described in Sec. II-C. 

Definition 8. Ci is the subgroup of S^, such that all 
permutations c G Cj are Li-constructible, with only one gate. 

Lemma 1. The subgroup Cj is a generating set o/S^"- 

Let (S2™, •) be a finite Symmetric Group with a generating 
set Ci given by generalized Toffoli gates. 

We denote by /„ (V, E) the Cayley graph associated with 
((^n, •), Cj). The Cayley graph /„ has degree re2" _1 and 
order 2™!. Notice that in this case, the corresponding circuits 
have re gates N, re(re — 1) gates C and re(re — l)(n — 2)/2 
gates T. Also, for i > 3 there are (") generalized Toffoli 
gates. Therefore, 

n 

J2 *(?) = K) + 2(2 ) + m + ■■■ + O = n2 n ~\ 

i=l 

Theorem 5. The upper bound for the diameter of the Cayley 
graph I n is (re — 1)2" + 1. 

Proof: Follows directly from Algorithm 1, by construc- 
tion. ■ 

Lemma 2. The Cayley graph I n is not a bipartite graph. 

Proof: We show that the graph /„ has an odd cycle. Let 
[3 1 2], [3 1 2 0], [1 3 2], [0 2 13] and [0 2 3 1] 
be the five vertices of the Cayley graph 12- By definition of 
generating set, we can apply the following changes: (2, 3), that 
corresponds to C 2 CNOT(a,b) with target in 6; (0, 1)(2,3), 
that corresponds to C 1 CNOT(a) with target in a; (0, 2)(1, 3), 
that corresponds to C^CNOTty) with target in b; (2,3), 
that corresponds to C 2 CNOT(a,b) with target in 6; and 
(0,2)(1,3), that corresponds to C l CNOT{b) with target in 
b. Therefore, we have an odd cycle and the Cayley graph /„ 
is not a bipartite graph. ■ 
Table VI summarizes our analysis of quantum cost for the 
synthesis based on Cayley graph I n , showing its relation to 
an upper bound for the diameter of the same graph. The 
first column indicates the amount of garbage (ancilla) qubits. 
The second column indicates the gate cost, which is upper 
bound for the diameter of Cayley graph /„. The third column 
indicates the quantum cost for the synthesis based on Cayley 
graph I n . This quantum cost is obtained by multiplying the 
diameter of the graph by the corresponding gate count. 

IV. Analysis of a circuit synthesis based on 

Cayley graph H n 

In this section, we present the Cayley graph H n associated 
to MC-Toffoli gates. These gates are used in the hypercube 
method for circuit synthesis, the we introduced in Sec. II-D. 
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TABLE VI 

Analysis of quantum cost for the synthesis based on Cayley 

GRAPH In . 



garbage 


gate count (gc) 


quantum cost (qc) 



1 

n-3 


(n - 1)2" + 1 
(n - 1)2" + 1 
(n - 1)2" + 1 


((n - 1)2" + 1)(2" - 3) 
((n - 1)2" + l)(24n - 88) 
((n - 1)2" + l)(10n - 25) 



Definition 9. Ch is the subgroup of S 2 ", such that, all 
permutations c G Ch are Lh -constructive, with only one 
gate. 

Corollary 1. The subgroup Ch is a generating set of S 2 ™. 

Let (5*2", •) be a finite Symmetric Group with a generating 
set Ch given by multiple-control Toffoli gates. 

We denote by H n (V,E) the Cayley graph associated 
with ((S 2 *» , •), Ch)- Notice that the Cayley graph H n has 
degree n2 n ~ 1 and order 2™!, the multiple-control Toffoli 
C n NOT(xi,x 2 , ... ,x n ) have values n target lines and 

< k < 2 n ~ 1 — 1, where k is a decimal value that represent 
the lines control. So, we have n2 n ^ 1 elements in Ch- 

The Cayley graph H n has a generating set of the same size 
and numbers of vertices of the Cayley graph /„, but those 
Cayley graphs are not isomorphic. 

Lemma 3. The Cayley graph H„ is a bipartite graph. 

Proof: Let x = { x\, x 2 , x k , xi, x m , x n , 
%n2 n -i } be any vertex of the Cayley graph H n in binary. 
Let y = { Vi, V2, ■ ■■, Vh •••)%! ■ • • j x n2 n-i } and z = { 
2i, z 2 , . . . , z„, . . . , z m , ■ • ■ , x n2 ™-i } be neighbors of x in 
binary, where for all 1 < i < 2", Xi = yi and Xj = Zi, except 

1 = m, i = n, i = k and i = I, in which cases x m = y m , 
x n = y n , Xk = Zk and xi = z%. If m = k and n = I, then 
y = z. If m = k and n ^ I, the Hamming distance between 
y and z is 3, then there is not an edge. If m / fc and n ^ I, 
the Hamming distance between y and z is 4, then there is not 
an edge. Therefore, the Cayley graph H n does not have odd 
cycles and H n is bipartite. ■ 

Theorem 6. The Cayley graph H n is not isomorphic to the 
Cayley graph I n . 

Proof: It follows directly from Lemmas 2 and 3. ■ 
For graphs H n , we have the following results for the upper 
and lower bound to the distance of the Cayley graph H n . 

Theorem 7. The distance d(x, l) between the vertex x of the 
graph H n to the identity element l is bounded by dn{x, l)/2 < 
d{x, l) < dn{x, l). 

Proof: By definition, if we apply a multiple-control 
Toffoli gate, we may have the followings results: i) 2-move, 
meaning that two bits simultaneouly go to their correct po- 
sitions; ii) 0-move, meaning that one bit goes to its correct 
position while another one goes to a wrong position; iii) — 2- 
move, meaning that two bits go to wrong positions. 

The worst case is the reverse permutation. For example, 



p = [ 111, 110, 001, 000 ] for n = 3. In this case, 
the Hamming distance to the identity permutation is n2 n , i.e., 
each bit is in the wrong position. We need to analyse only 
two cases, because our algorithm does not apply MC-Toffoli 
gates on bits already in the correct position, thus avoiding 
simultaneous misplaces of two bits. 

The first case gives us a lower bound, because we have the 
best case if all exchanges are 2-moves. Therefore, we have 
d H (x, i) = n2 n /2 = n2 n ~ 1 . So, d(x, l) > d H {x, i)/2. 

The second case gives us an upper bound, because we have 
the worst case if all exchanges are 0-moves. Therefore, we 
have d(x, l) = n2 n , but by Algorithm 2 we have an upper 
bound of (n — 1)2™. So, d(x, l) < dn(x, l). ■ 

Theorem 8. The upper bound for the diameter of the Cayley 
graph H n is (n - l)2 n + 1. 

Proof: Follows directly from Algorithm 2, by construc- 
tion. ■ 
In order to obtain the lower bound for the diameter, we 
use the fact that the multiple-control Toffoli gates change the 
position of two bits. 

Theorem 9. The lower bound for the diameter of the Cayley 
graph H n is n2 n ~ 1 . 

Proof: Remark that the reverse permutation has Hamming 
distance to the identity permutation equal to n2 n . The all MC- 
Toffoli gate applied by Algorithm 2, over reverse permutation 
is a 2-move. Therefore, we have n2 n /2 = n2 n ~ 1 . ■ 



TABLE VII 

Analysis of quantum cost on Cayley graph H, 



garbage 


gate count (gc) 


quantum cost (qc) 



1 

n-3 


(n - 1)2" + 1 
(n - 1)2" + 1 
(n - 1)2" + 1 


((n - 1)2" + 1)(2" - 3 + 2m) 
((n - 1)2" + l)(24n - 86) 
((n - 1)2" + l)(10n - 23) 



Table VII summarizes our analysis of quantum cost for the 
synthesis based on Cayley graph H n , showing its relation to 
an upper bound for the diameter of the same graph. The first 
column indicates the amount of garbage (ancilla) qubits. The 
second column indicates the gate count, which is an upper 
bound for the diameter of Cayley graph H„ . The third column 
indicates the quantum cost for the synthesis based on Cayley 
graph H n . This quantum cost is obtained by multiplying the 
diameter of the graph by the corresponding gate count. 

V. Conclusions 

Since reversibility is an essential aspect the circuit model 
of quantum computers, we must have efficient methods for 
designing and analysing reversible circuits. Group Theory 
provides a unified framework for the development and analysis 
of methods for reversible circuit synthesis. In this work, we 
studied two Cayley graphs, I n and H n , that can be applied to 
the synthesis of reversible circuits. 

Maslov, Dueck and Miller [8], [9] proposed an algorithm 
to reversible circuit synthesis using generalized Toffoli gates 
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that we modeled by the Cayley graph /„. The framework 
of the theory of Cayley graphs enabled us to prove that the 
diameter of /„ is less than (n — 1)2" + 1 and the number 
of vertices is 2"!. These bounds are consistent with the gate 
count and quantum cost complexity of the circuit synthesis 
using G-Toffoli gates. 

We presented an algorithm to reversible circuit synthesis 
using multiple-control Toffoli gates. The proposed circuit 
synthesis is based on the hypercube Cayley graph H n . The 
diameter of the Cayley graph H n is at most (n — 1)2™ + 1 
and is at least n2 n ~ 1 . Since the number of vertices of H n is 
2"!, we have that the number of vertices is a factorial on the 
diameter. We proved that Cayley graph H n is not isomorphic 
to Cayley graph I n , so the corresponding synthesis algorithms 
are different. These bounds are consistent with the gate count 
and quantum cost complexity of the circuit synthesis using 
MC-Toffoli gates. 

We may expect Cayley graphs to be an attractive and 
versatile framework for analysing reversible circuit synthesis. 
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